CVE-2024-54909 | GoldPanKit eva-server 4.1.0 download path information disclosure

A vulnerability was found in GoldPanKit eva-server 4.1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /api/resource/local/download. The manipulation of the argument path leads to information disclosure.

This vulnerability is known as CVE-2024-54909. The attack can only be initiated within the local network. There is no exploit available.